diff options
| author | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2011-12-02 13:45:15 -0800 |
|---|---|---|
| committer | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2011-12-02 13:45:15 -0800 |
| commit | c9f7324e6c6f634bc0f7214fd0ab12fb9847c857 (patch) | |
| tree | ac9afc51243fa6cbedacbb821319bd59d2a2bdc5 /tools/flask/policy/policy/modules/xen/xen.te | |
| parent | 64b8b98854e09202f420b8bb02cb915b8a03cd55 (diff) | |
| download | xen-c9f7324e6c6f634bc0f7214fd0ab12fb9847c857.tar.gz xen-c9f7324e6c6f634bc0f7214fd0ab12fb9847c857.tar.bz2 xen-c9f7324e6c6f634bc0f7214fd0ab12fb9847c857.zip | |
xsm: remove unused xsm_assign_vector check
The PHYSDEVOP_alloc_irq_vector hypercall is a noop, so its XSM check
is not useful. Remove it and the "event vector" FLASK permission.
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Committed-by: Keir Fraser <keir@xen.org>
Diffstat (limited to 'tools/flask/policy/policy/modules/xen/xen.te')
| -rw-r--r-- | tools/flask/policy/policy/modules/xen/xen.te | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index d95a7da9b7..8113467080 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -31,7 +31,6 @@ scheduler physinfo heap quirk readconsole writeconsole settime microcode}; allow dom0_t domio_t:mmu {map_read map_write}; allow dom0_t iomem_t:mmu {map_read map_write}; -allow dom0_t pirq_t:event {vector}; allow dom0_t xen_t:mmu {memorymap}; allow dom0_t dom0_t:mmu {pinpage map_read map_write adjust updatemp}; |